Re: Debugmode together with Kerberos

On 10/29/23 6:23 PM, Matthew Newton via Freeradius-Users wrote:

On 29/10/2023 21:49, Brendan Kearney wrote:

...

I have a script that exports an env variable with the keytab specified and then runs raduisd -X. this necessary for radius to pick up the kerberos creds in the keytab and be able to bind to the directory.

#!/bin/bash

export KRB5_CLIENT_KTNAME=/etc/raddb/radius.keytab

Could you not just set that in the ENV section of radiusd.conf? That's there to avoid scripts like this.

learned something new... thanks for the tip.  now i dont have to modify/override the systemd init, too.